-
Blog Post Nov 30, 2021
Certificate terms have continued to decrease, making S/MIME certificates used to secure and sign emails one of the last holdouts. Until recently, that is.
-
Podcast Nov 29, 2021
Root Causes 190: Phishing Coinbase
Our hosts describe a recently discovered exploit where attackers use weaknesses in one-time-password-based MFA to steal Coinbase accounts.
-
Podcast Nov 17, 2021
Root Causes 189: What Is CA Agnostic?
Certificate Lifecycle Management (CLM) platforms that can provision certificates of all types from all CAs, private and public, are "CA agnostic."
-
Podcast Nov 11, 2021
Root Causes 188: Introduction to Web Security
Malware and other web site attacks can result in reputational damage and site access being blocked or hindered by end user software and services.
-
Podcast Nov 08, 2021
Root Causes 187: Apple Limits Term for S/MIME Certificates
Apple recently announced that it would limit the allowable term for public S/MIME certificates to 825 days. We explain this declaration's implications.
-
Podcast Nov 04, 2021
Root Causes 186: Digital Signature SNAFU Costs 3 Billion Euro Contract
In this episode we explain how an esoteric digital signature error rendered a 3 billion Euro manufacturing contract with the Austrian government invalid.
-
Podcast Nov 02, 2021
Root Causes 185: EU Covid Passport Root Key Stolen
The root certificates of the EU's Covid Passport program have suffered a private key compromise and counterfeit passports are for sale on the black market.
-
Webinar Oct 28, 2021
Cloud or On-Premise: Updating Assumptions on Secure Certificate Manage
Join Tim Callan and Jason Soroko explain the difference between Cloud and On-Premise and which is better for secure certificate management.
-
Webinar Oct 28, 2021
Cloud or On-Premise: Updating Assumptions on Secure Certificate Manage
Join Tim Callan and Jason Soroko explain the difference between Cloud and On-Premise and which is better for secure certificate management.
-
Podcast Oct 27, 2021
Root Causes 184: Popular College WiFi Vulnerability Revealed
Certificate misconfiguration in commonly used college WiFi can expose logins. We discuss WiFi authentication, EAP, and how this vulnerability occurs.
-
Podcast Oct 21, 2021
Root Causes 183: New MSCA Attack Toolkits
A new white paper and set of toolkits illuminate MSCA root key attacks. We provide a clear action list for IT professionals in charge of Microsoft CA.
-
Podcast Oct 18, 2021
Root Causes 182: Let's Encrypt Root Expiration
Let's Encrypt's recent root expiration caused widespread service outages. We discuss this expiration and the recipe for avoiding problems in the future.